• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Fetchmail POP3 Client Buffer Overflow Vulnerability

Solution:
The vendor has released an advisory along with version 6.2.5.2 to address this issue.

Please see the referenced advisories for more information.


Apple Mac OS X Server 10.3.9

• Apple SecUpdSrvr2006-004Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=11231&cat= 1&platform=osx&method=sa/SecUpdSrvr2006-004Pan.dmg

Apple Mac OS X 10.4.7

• Apple SecUpd2006-004Intel.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=11232&cat= 1&platform=osx&method=sa/SecUpd2006-004Intel.dmg

SGI ProPack 3.0 SP6

• SGI Patch 10197
  ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/RPMS

Eric Raymond Fetchmail 6.1 .0

• Mandriva corporate/2.1/RPMS/fetchmail-6.1.0-1.3.C21mdk.i586.rpm
  Corporate Server 2.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva corporate/2.1/RPMS/fetchmail-daemon-6.1.0-1.3.C21mdk.i586.rpm
  Corporate Server 2.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva corporate/2.1/RPMS/fetchmailconf-6.1.0-1.3.C21mdk.i586.rpm
  Corporate Server 2.1
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/corporate/2.1/RPMS/fetchmail-6.1.0-1.3.C21mdk.x86_64.rpm
  Corporate Server 2.1/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/corporate/2.1/RPMS/fetchmail-daemon-6.1.0-1.3.C21mdk.x86_64.rpm
  Corporate Server 2.1/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva x86_64/corporate/2.1/RPMS/fetchmailconf-6.1.0-1.3.C21mdk.x86_64.rpm
  Corporate Server 2.1/X86_64
  http://www1.mandrivalinux.com/en/ftp.php3

Eric Raymond Fetchmail 6.2 .0

• Eric Raymond fetchmail-patch-6.2.5.2.gz
  http://download.berlios.de/fetchmail/fetchmail-patch-6.2.5.2.gz


• RedHat fetchmail-6.2.0-3.4.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/fetchmail-6.2.0 -3.4.legacy.i386.rpm


• RedHat fetchmail-6.2.0-8.2.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/fetchmail-6.2.0 -8.2.legacy.i386.rpm

Eric Raymond Fetchmail 6.2.5 .1

• Eric Raymond fetchmail-patch-6.2.5.2.gz
  http://download.berlios.de/fetchmail/fetchmail-patch-6.2.5.2.gz